Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/82CA92C4703A11EBB9A2D47AC4F9AE02.roa
File: 82CA92C4703A11EBB9A2D47AC4F9AE02.roa (raw, json)
Hash identifier: Y/iBnK8ZipjxkATaALxABZ9CTEeJIdjjxY8Yxx9n9DM=
Subject key identifier: A2:09:7F:47:64:B3:FA:80:66:F5:F5:03:B6:71:E5:05:26:BB:89:AB
Certificate issuer: /CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
Certificate serial: 079A
Authority key identifier: E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/82CA92C4703A11EBB9A2D47AC4F9AE02.roa
Signing time: Tue 10 Dec 2024 21:50:47 +0000
ROA not before: Tue 10 Dec 2024 21:50:47 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 140936
IP address blocks: 2406:9dc0:6660::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1946 (0x79a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
Validity
Not Before: Dec 10 21:50:47 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6758b7b7-03a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:27:07:f4:14:a4:24:16:40:9d:31:d6:c4:5d:
11:65:cc:e1:99:4b:01:c9:98:66:fa:ed:28:11:29:
03:43:42:de:e4:09:ac:c0:7c:5e:b6:82:2a:f6:fd:
16:44:7b:9e:89:fd:d8:53:23:2c:29:e5:93:45:09:
f4:50:29:d9:0a:80:0b:c0:fc:66:04:18:6e:93:9a:
7e:51:0d:96:fb:bf:83:0c:4e:1d:ee:f9:5e:9d:6d:
2a:60:f0:40:ac:99:48:0e:c1:ad:7e:1c:ba:d7:07:
99:85:80:48:4a:69:4d:64:5e:b9:11:39:f3:bf:4b:
aa:e6:60:3b:f5:c0:eb:13:99:20:0c:df:ee:0d:3f:
01:97:62:ca:b9:90:35:2e:9e:28:78:34:ee:2f:9f:
50:35:32:6b:f0:fc:55:cb:f4:43:bb:2e:a9:89:c6:
e0:48:ba:4a:ae:c8:51:f5:8c:d6:9b:0b:ec:dd:ae:
3a:ab:5a:62:1e:75:11:fa:7e:55:8d:3a:86:8e:1d:
38:47:ce:31:a0:bb:58:7c:28:a1:28:73:f1:b2:b2:
76:1a:66:c5:01:c2:37:2d:2b:d3:cb:c9:bd:ea:b9:
c2:78:22:8e:c0:ff:fb:d3:d9:33:78:4f:ee:24:06:
f1:ba:8a:35:1b:7b:58:1e:0d:2e:14:a9:ae:00:63:
f5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:09:7F:47:64:B3:FA:80:66:F5:F5:03:B6:71:E5:05:26:BB:89:AB
X509v3 Authority Key Identifier:
keyid:E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/82CA92C4703A11EBB9A2D47AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:9dc0:6660::/44
Signature Algorithm: sha256WithRSAEncryption
7b:63:43:66:af:dd:b1:08:a4:01:b0:c3:78:78:af:b4:74:92:
cb:30:2b:a6:b4:b2:0a:ca:a3:dd:b6:ea:9d:80:a9:f2:1d:98:
63:79:09:18:64:21:93:2b:b6:1a:93:1e:5f:4c:6e:c3:af:2b:
9c:eb:21:31:55:5b:39:9a:56:d1:9f:78:99:9e:2a:bd:36:3a:
b5:0b:f3:8c:fe:e1:02:7b:c6:f4:9e:0f:90:ee:97:fd:f3:17:
b7:84:48:c5:27:3b:3d:34:72:72:81:fc:9a:c6:05:50:c8:f5:
f2:52:c7:f9:f0:f5:96:63:d7:51:ca:54:96:37:4c:d0:73:4c:
9d:6b:ac:21:ca:48:d8:1c:38:8d:5c:94:4e:db:c7:c6:41:92:
22:4f:c6:d3:d5:2d:f2:da:b9:b1:a8:6f:be:f9:00:5e:e6:a2:
d2:19:6f:e3:94:19:cf:a0:82:ea:87:88:8f:59:6e:be:c4:cc:
14:c5:bc:87:11:d2:70:4e:49:9f:12:fd:45:4a:20:94:b1:f6:
58:ae:dc:08:63:d8:2f:a0:c4:d2:39:8c:c5:0e:d6:5d:99:e8:
40:e4:3f:1c:41:4f:60:a7:12:2b:65:4d:9a:c0:f8:9f:56:7f:
ca:b0:be:20:82:60:f1:5b:aa:1d:1c:6d:0c:9f:c9:0c:de:08:
a4:b7:37:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 01:04:44 2025 by rpki-client